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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A method for automatically distributing a software update to a 
network of devices controlled by an organization, the method comprising: 

receiving application and system information from one or more inoculation clients installed 
on the said devices, said receiving performed via peer-to-peer communication; 

comparing said application and system information with application and version information 
in a global update repository to determine if an update exists for a corresponding 
application controlled by an inoculation client, the global update repository including 
updates from multiple application manufacturers; 

queueing the said update if an update exists for an application controlled by an inoculation 
client; 

receiving a communication from the said corresponding inoculation client checking for 

available distribution jobs; and 
automatically transmitting the said update to the said corresponding inoculation client in 

response to the said receiving a communication if an update exists for an application 

controlled by the said corresponding inoculation client. 

2. (Currently Amended) The method of claim 1, further comprising: 

configuring an inoculation server distributed across one or more of the devices; and 
performing an initial connection between the said inoculation server and the said global 
update repository. 
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3. (Currently Amended) The method of claim 1 , wherein the said application and system 

information includes operating system information and version. 

4. (Currently Amended) The method of claim 1, wherein the said application and system 
information includes installed software applications and versions. 

5. (Currently Amended) The method of claim 1, wherein the said application and system 
information includes network information. 

6. (Currently Amended) The method of claim 1 , wherein the said application and system 
information is received in Extensible Markup Language (XML) format. 

7. (Currently Amended) The method of claim 1 , wherein the said queuing the said update 
includes linking the said update package and the said corresponding application in a 
database table. 

8. (Original) The method of claim 1 5 wherein the global update repository is a centralized 
repository that manages operating systems and software to be delivered to inoculation 
servers. 

9. (Currently Amended) The method of claim 8, therein the said global update repository 
mines, retrieves, and archives external update information. 
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10. (Currently Amended) The method of claim 9, wherein the said external update information 

is mined and retrieved from external security websites. 

1 1 . (Currently Amended) The method of claim 1 0, wherein the sai4 global update repository 
uses web spiders. 

12. (Currently Amended) The method of claim 1, wherein the said comparing includes utilizing 
an HTTP GET or POST command. 

13. (Currently Amended) The method of claim 9, wherein the said external update information 
contains a vendor type, the said vendor type being automatic download and release, 
automatic download and manually confirm release, or manually download and confirm. 

14. (Currently Amended) The method of claim 1 , wherein the said comparing is performed by 
an inventory control engine. 

15. (Currently Amended) The method of claim 1 , wherein the said queuing is performed by a 
distribution engine. 

16-19. (Cancelled) 

20. (Currently Amended) An apparatus for automatically distributing a software update to a 
network of devices controlled by an organization, the apparatus comprising: 
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means for receiving application and system information from one or more inoculation clients 
installed on the said devices, the said receiving performed via peer-to-peer 
communication; 

means for comparing the said application and system information with application and 
version information in a global update repository to determine if an update exists for a 
corresponding application controlled by an inoculation client, the global update 
repository including updates from multiple application manufacturers; 

means for queueing the said update if an update exists for an application controlled by an 
inoculation client; 

means for receiving a communication from the said corresponding inoculation client 
checking for available distribution jobs; and 

means for automatically transmitting the said update to the said corresponding inoculation 
client in response to the said receiving a communication if an update exists for an 
application controlled by the said corresponding inoculation client. 



21 . (Currently Amended) The apparatus of claim 20, further comprising: 

means for configuring an inoculation server distributed across one or more of the devices; 
and 

means for performing an initial connection between the said inoculation server and the said 
global update repository. 



22. (Currently Amended) The apparatus of claim 20, wherein the said application and system 
information includes operating system information and version. 
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23. (Currently Amended) The apparatus of claim 20, wherein the said application and system 
information includes installed software applications and versions. 

24. (Currently Amended) The apparatus of claim 20, wherein the said application and system 
information includes network information. 

25. (Currently Amended) The apparatus of claim 20, wherein the said application and system 
information is received in Extensible Markup Language (XML) format. 

26. (Currently Amended) The apparatus of claim 20, wherein the said queuing the said update 
includes linking the said update package and the said corresponding application in a 
database table. 

27. (Original) The apparatus of claim 20, wherein the global update repository is a centralized 
repository that manages operating systems and software to be delivered to inoculation 
servers. 

28. (Currently Amended) The apparatus of claim 20, therein the said global update repository 
mines, retrieves, and archives external update information. 

29. (Currently Amended) The apparatus of claim 28, wherein the said external update 
information is mined and retrieved from external security websites. 
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30. (Currently Amended) The apparatus of claim 29, wherein the said global update repository 

uses web spiders. 

3 1 . (Currently Amended) The apparatus of claim 20, wherein the said means for comparing 
includes means for utilizing an HTTP GET or POST command. 

32. (Currently Amended) The apparatus of claim 28, wherein the said external update 
information contains a vendor type, the sai4 vendor type being automatic download and 
release, automatic download and manually confirm release, or manually download and 
confirm. 

33. (Currently Amended) The apparatus of claim 20, wherein the said means for comparing is 
an inventory control engine. 

34. (Currently Amended) The apparatus of claim 20, wherein the said means for queuing is a 
distribution engine. 

35. (Currently Amended) A program storage device readable by a machine, tangibly embodying 
a program of instructions executable by the machine to perform a method for automatically 
distributing a software update to a network of devices controlled by an organization, the 
method comprising: 

receiving application and system information from one or more inoculation clients installed 
on the said devices, the said receiving performed via peer-to-peer communication; 
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comparing the said application and system information with application and version 

information in a global update repository to determine if an update exists for a 

corresponding application controlled by an inoculation client, the global update 

repository including updates from multiple application manufacturers; 

queueing the said update if an update exists for an application controlled by an inoculation 

client; 

receiving a communication from the said corresponding inoculation client checking for 

available distribution jobs; and 
automatically transmitting the said update to the said corresponding inoculation client in 

response to the said receiving a communication if an update exists for an application 

controlled by the said corresponding inoculation client. 



36. (New) An apparatus comprising: 

a global update repository including software updates from multiple application 

manufacturers; and 
an inoculation server configured to: 

receive application and system information from one or more inoculation clients 
installed on a network of devices controlled by an organization, the receiving 
performed via peer-to-peer communication; 
compare the application and system information with application and version 

information in the global update repository to determine if an update exists for a 
corresponding application controlled by an inoculation client; 
queue the update if an update exists for an application controlled by an inoculation 
client; 
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receive a communication from the corresponding inoculation client checking for 

available distribution jobs; and 

automatically transmit the update to the corresponding inoculation client in response to 

the receiving a communication if an update exists for an application controlled by 

the corresponding inoculation client. 
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